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Abstract. Let K he a number field such that there exists an eUiptic curve E of rank one 
over K. For a set Wk of primes of K, let Ok.Wk = {x ^ K : ordp x > 0, Vp ^ I^k]- Let 
P £ E{K) be a generator of E{K) modulo the torsion subgroup. Let (a;„(P), y„{P)) be the 
affine coordinates of [n\P with respect to a fixed Weierstrass equation of E. We show that 
there exists a set Wk of primes oiK of natural density one such that in Ok.Wk multiplication 
of indices (with respect to some fixed multiple of P) is existentially definable and therefore 
these indices can be used to construct a Diophantine model of Z. We also show that Z 
is definable over Ok.h/k using just one universal quantifier. Both, the construction of a 
Diophantine model using the indices and the first-order definition of Z can be lifted to the 
integral closure of Ok,Wk ^riy infinite extension K^o of K as long as E{Kaa) is finitely 
generated and of rank one. 

1. Introduction 

The interest in constructing Diophantine models of Z over various rings and related is- 
sues of Diophantine decidability and definability over rings goes back to a question that 
was posed by Hilbert: given an arbitrary polynomial equation in several variables over 
Z, is there a uniform algorithm to determine whether such an equation has solutions in 
Z? This question, otherwise known as Hilbert's Tenth Problem, has been answered neg- 
atively in the work of M. Davis, H. Putnam, J. Robinson and Yu. Matijasevich. (See HSU , 
[16|| and [fT4ll .) Since the time when this result was obtained, similar questions have been 
raised for other fields and rings. In other words, if i? is a recursive ring, then, given an 
arbitrary polynomial equation in several variables over R, is there a uniform algorithm to 
determine whether such an equation has solutions in Rl One way to resolve the ques- 
tion of Diophantine decidability negatively over a ring of characteristic is to construct a 
Diophantine definition of Z over such a ring. This notion is defined below. 

Definition 1.1. Let i? be a ring and let A c R^,k G Z>o. Then we say that A has a 
Diophantine definition over R if there exists a polynomial 

f{t\i ■ ■ ■ 1 tky X±y • • • ) Xn) G Rltly ■ ■ ■ y tki -^1) • • • ) -^n] 
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such that for any t ^ E!^, 

3Xi, . . . , X„, e i?, /(ti, . . . , tfc, Xi, Xn) = <J=^ t G A. 

If the quotient field of R is not algebraically closed, we can allow a Diophantine defi- 
nition to consist of several polynomials without changing the nature of the relation. (See 
[l6ll for more details.) 

The usefulness of Diophantine definitions stems from the following easy lemma. 

Lemma 1.2. Let Ri c R2 be two recursive rings such that the quotient field of R2 is not 
algebraically closed. Assume that Hilbert's Tenth Problem (abbreviated as "HTP" in the fixture) 
is undecidable over Ri, and Ri has a Diophantine definition over R2. Then HTP is undecidable 
over R2. 

Using norm equations, Diophantine definitions have been obtained for Z over the rings 
of algebraic integers of some number fields. Jan Denef has constructed a Diophantine defi- 
nition of Z for the finite degree totally real extensions of Q. Jan Denef and Leonard Lipshitz 
extended Denef's results to all the extensions of degree 2 of the finite degree totally real 
fields. Thanases Pheidas and the author of this paper have independently constructed Dio- 
phantine definitions of Z for number fields with exactly one pair of non-real embeddings. 
Finally Harold N. Shapiro and the author of this paper showed that the subfields of all 
the fields mentioned above "inherited" the Diophantine definitions of Z. (These subfields 
include all the abelian extensions.) The proofs of the results listed above can be found in 
m, m, M, IIH, 113, and [12911. 

The author modified the norm method to obtain Diophantine definitions of Z for "large" 
sub rings of totally real number fields (not equal to Q) and their extensions of degree 2. 
(See [13T|| . [l32l] . [l34ll , [l36ll .) Further, again using norm equations, the author also showed 
that in some totally real infinite algebraic extensions of Q and extensions of degree 2 of 
such fields one can give a Diophantine definition of Z over integral closures of "small" 
and "large" rings, though not over the rings of algebraic integers. (The terms "large" and 
"small" rings will be explained below in Definition |1.4i ) 

Using elliptic curves Bjorn Poonen has shown the following in [l23ll . 

Theorem 1.3. Let M/K he a number field extension with an elliptic curve E defined over K, 
of rank one over K, such that the rank of E over M is also one. Then Ok (the ring of integers 
of K) is Diophantine over Om- 

Cornelissen, Pheidas and Zahidi weakened somewhat assumptions of Poonen's theorem. 
Instead of requiring a rank 1 curve retaining its rank in the extension, they require exis- 
tence of a rank 1 elliptic curve over the bigger field and an abelian variety over the smaller 
field retaining its positive rank in the extension (see [jT]]). Further, Poonen and the au- 
thor have independently shown that the conditions of Theorem 11.31 can be weakened to 
remove the assumption that the rank is one and require only that the rank in the extension 
is positive and the same as the rank over the ground field (see [37] and Il22ll ). Following 
Denef in [|9l] , the author also considered the situations where elliptic curves had finite rank 
in infinite extensions and showed that when this happens in a totally real field one can 
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existentially define Z over the ring of integers of this field and the ring of integers of any 
extension of degree 2 of such a field (see [l38ll ). 

Recently, in [fTSll . Mazur and Rubin showed that if Shafarevich-Tate conjecture held over 
a number field K, then for any cyclic extension M of K, there existed an elliptic curve of 
rank one over K, keeping its rank over M. Combined with Theorem 11.31 this new result 
showed that Shafarevich -Tate conjecture implied HTP is undecidable over the rings of 
integers of any number field. Similar consequences can be derived for big rings in any 
number field. 

Perhaps the most prominent open question in the subject is the Diophantine status of Q. 
As indicated above, one way to show unsolvability of HTP over Q would be to construct 
a Diophantine definition of Z over Q. A Diophantine definition is a t)^e of a Diophantine 
model. Given two recursive rings Ri and R2 we say that R2 has a Diophantine model of 
Ri if there exists an injective and recursive map : Ri — > R2 sending Diophantine sets to 
Diophantine sets. If Ri has undecidable Diophantine sets, then so does R2. Therefore, any 
recursive ring with a Diophantine model of Z has undecidable Diophantine sets and thus 
HTP is unsolvable over this ring. 

It is also not hard to show that given an injection of Z into a recursive ring R, it 
is enough to show that the images of the graphs of addition and multiplication are Dio- 
phantine over R, in order to conclude that is a Diophantine model. An old plan for 
constructing a Diophantine model of Z over Q involved elliptic curves of rank one (see 
[I2T]]). More specifically let E be an elliptic curve defined and of rank one over Q. Fix an 
affine Weierstrass equation for E, as well as a generator Q. Let r be the size of the torsion 
group and let P = [r]Q. Let (a;„(P), y„(P)) be the coordinates of [n]P derived from our 
fixed affine Weierstrass equation. Now for n 7^ send n to It is easy to see that the 
graph of addition is Diophantine over Q, but it is not clear what happens to the graph of 
multiplication. This plan has another potentially fatal complication: Mazur's conjectures 
(see [fTSll . [fT6ll . IfTTII ). As was shown in QS]], if Mazur's conjecture on topology of rational 
points holds, there is no Diophantine model of Z over Q. It is precisely these difficulties 
preventing the resolution of the problem over Q that motivated the investigation of Dio- 
phantine definability and decidability over "large" or "big" rings. These rings can be found 
in any number field and we define them below. 

Definition 1.4. Let K be a number field and let Wk be a set of primes of K. Define Ok,^^ 
to be the following ring: 

Ok,^k ■.= {xeK : ordp a; > 0, Vp ^ Wk}. 

If Wk is infinite we will call these rings "big" or "large". If Wk is finite we refer to the 
corresponding rings as "small". Such rings are also known as the rings of ^^^-integers. 

Perhaps the most significant result concerning big rings was obtained by Poonen in [l24ll . 
In this paper he showed that there exists a big ring inside Q where the set of primes al- 
lowed in the denominator is of natural density one and the ring possesses a Diophantine 
model of Z. To carry out his construction, Poonen modeled integers by approximation. 
More specifically in [124|| he proved the following. Let E be a curve of rank one over Q 
without complex multiplication and with only one connected component. Let P be a gen- 
erator of E{Q). Then for some set Wq of rational primes of natural density one, we have 

that E{Ok,Wq) = {{xiiiVid^i ^ ^>o} U { finite set }, where {xn,yn) are the coordinates of 
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[n]P obtained from a fixed affine Weierstrass equation of E. Further it is also the case 
that \ye- ~ i\ < 10~' for all positive integers i. Later in Il26ll . this result was lifted to all 
number fields with rank one elliptic curves (also including curves with complex multipli- 
cation) though construction of the model proceeded along a different path but still using 
a subsequence of coordinates (x^ -,?/£.). 

In this paper we resurrect in a manner of speaking the old plan of modeling Z using the 
indices of points on an elliptic curve but only over a big ring. More precisely we prove the 
following theorem. 

Theorem 1.5. Let K bea number field. Let E be an elliptic curve defined and of rank one over 
K. Let P be a generator of E{K) modulo the torsion subgroup, and fix an affine Weierstrass 
equation for E of the form y'^ = + ax + b, wif/i a, 6 G Ok, where Ok is the ring of integers 
of K. Let {xn,yn) be the coordinates of [n]P derived from this Weierstrass equation. Then 
there exists a set of K-primes Wk of natural density one, and a positive integer rrio such that 
the following set U c O]^^^ is Diophantine over Ok,Wk- 

{Ui, U2, Us, X,, X2, X3, Vu V2, Vs, Fi, Y2, F3) e n ^ 

3 unique h, ^2, h e ^^0 such that ( ^, ^ ) = (x^ofc. , 2/mofcJ , for i = l,2, 3, and ks = kik2. 



We can use this result to construct yet another variation of a Diophantine model of Z. 

Definition 1.6. Let i? be a countable recursive ring, let D c R'', k G Z>o, be a Diophantine 
subset, and let be a (Diophantine) equivalence relation on D, i.e assume that the set 
{{x,y) : x,y e D, X ^ y} is a Diophantine subset of R^''. Let D = IJ.g^D,, where Di is 
an equivalence class of ^, and let </> : Z — y {Di, z g Z} be defined by 0(z) = Di. Finally 
assume that the sets 

Plus = {{x,y,z) : X e Di, y G Dj, z G A+j} 

and 

Times = {{x,y, z) : x G Di, y E Dj,z E Dij} 

are Diophantine over R. 
Then we will say that R has a class Diophantine model of Z. 

It is clear that if R does have a class Diophantine model of Z then HTP is not solvable 
over R. Such a model of Z has been used already to show Diophantine undecidability of 
function fields of positive characteristic (see [HO]], mH, [l20]], QSO]], [13311 ). 

As a corollary of Theorem II. 5 1 we immediately obtain the following statement. 

Corollary 1.7. In the notation above, for n ^ let = [{U^on, X^^^ri,Vmon,ymon)], the 
equivalence class of {Umon, Xmon, Knon, Ymon) under the equivalence relation described below. 



where f^mon? ^mon? '^•mon,~^mQn ^ O k^Wk^^itio^t^^o^ 7^ and {Xjuqyi, ymon) 



Let 0(0) = {(0, 0, 0, 0)}. Then (p is a class Diophantine model of Z. (Here if VVYY 7^ we 
set (U, X, V, Y) ^ {U, X, V, Y) if and only ifZ = ^andj = y.) 
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Using Theorem II .51 we also prove the following. 



Theorem 1.8. Let K be a number field. Let E be an elliptic curve defined and of rank one 
over K. Then there exists a set Wk of primes of K of natural density one such that Z is 
first-order definable over Ok,Wk using just one universal quantifier 

This result is an improvement of the first-order definability results for big rings in fT\ 
and p25l, where the first-order definition of Z was given using just one universal quantifier 
over big rings contained in Q in [,25] and in some number fields in ^ with the natural 
density of the inverted primes arbitrarily close but not equal to one. (We should also note 
here that the main result of [l25ll is defining Z over Q using two universal quantifiers.) The 
result of this paper is also a natural complement to the results of ^ where it was shown 
that a model of Z can be defined over Q using just one universal quantifier provided a 
certain conjecture on elliptic curves is true. 

Finally, Theorem 11.51 allows us to simplify some results concerning infinite extensions 
from [l38ll . The result of Theorem 11.51 holds for any algebraic extension of Q with a rank 
1 finitely generated elliptic curve. No additional assumptions are required. In the past we 
needed some way to define integrality at a prime in an infinite extension to use this kind 
of elliptic curve technique. 

We finish this section with a notation set to be used in the rest of the paper. 

Notation 1.9. • Let = {2, 3, 5, ... } denote the set of rational primes. 

• Let K be a number field. 

• Let be the set of all finite primes of K. 

• Given x e K, let n(x) = ripP™'^"'^' where the product is taken over all p e 
such that ordp x > 0. Let D(x) = n(x~^). 

• Let Wk C (we will make Wk more specific in the next section) . 

• Let A,Be Ok,Wk- Then we will say that {A, B)^^ = 1 if for all p G \ we 
have that either ordp A = or ordp B = Q. 

• Let A,Be Okwk- Then we will say that A _B if for all p ^ Wk we have that 

ordp B > ordp A or in other words A divides B in the ring Ok,Wk- 

• Let Hk be the class number of K. (See [fTTH . Chapter I, §4 for the definition of a 
class number.) 

• Let 21, ^ be two integral divisors of K. Then we will say that 21 23 to mean that for 
all p e ^{K) we have that ordp 21 < ordp 03. 

• Suppose 21, ® are two divisors of K with ^ = 21^ . Then we set = 21. 

2. An Outline of the Proof of Theorem 11.51 

Let K be a number field with an elliptic curve of rank 1 . The key to the proof of Theorem 
11.51 that is the key to the construction of a big subring of K where the theorem holds, is 
the choice of A'-primes to invert in the ring. In [l24ll and [l26ll the inverted primes were 
chosen so that only a specific sequence of the elliptic curve points had its coordinates in 
the ring. (We remind the reader that an element of our number field is in the ring if and 
only if all the primes occurring in the denominator of its divisor are inverted in the ring.) 
In our case, almost no point of the elliptic curve will have its coordinates in the ring and 
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we will have to represent each coordinate by a pair consisting of a "numerator" and the 
corresponding "denominator". This is the reason for having a class Diophantine model at 
the end instead of a regular Diophantine model: every coordinate of an elliptic curve point 
will be represented by an equivalence class of pairs of "numerators" and "denominators", 
as in a standard construction of the fraction field of a ring. 

To explain the main ideas of the proof we for the moment simplify the situation assuming 
that K = Q, there are no torsion points, and every non-trivial multiple of the generator 
P has a primitive divisor In other words we assume that for every n > 0, there exists 
a prime dividing the reduced denominators of the affine coordinates of [n]P such that 
this prime does not divide the reduced denominators of the coordinates of any [m]P with 
< m< n. (In general this will be true for sufficiently large n only. See Proposition 
|4.4i ) We will also assume that the coordinates of P itself are non-zero integers. (In "real 
life" we will invert the primes which appear in the denominator of the coordinates of P. 
Also the primitive divisor requirement and the chosen form of the Weierstrass equation 
will force all the non-trivial multiples of P to have non-zero coordinates.) Under our 



assumptions we can represent [n]P for a non-zero integer n, as a pair I — ^ , where 



Un 7^ 0,Vn > 0,Xn 7^ 0, F„ > arc integers and (f/„, Vn) = 1, (X„, F„) = 1. Later we will 
not be able to assume that Vn, ¥„, are integers but only that these are elements of 
our big ring. However, we will able to treat the variables ranging over the big rings almost 
in the same way as if they were integers. 

From [l24ll (see Proposition |4.3[ Lemma 14^71 and Lemma [4^9] in this paper) we know that 

(2.1) if m, n G Z^o with m\n, then Vm\Vn in Z, and conversely if Vm\Vn in Z then m|n, 



where {Vk,Vm) = GCD(yk,Vm) and {k,m) = GCD{k,m) in Z. (Since we assumed that 
every non-trivial multiple of P has a primitive divisor, we do not have to worry about k 
and m being large enough.) Given our assumptions on the coordinates of P, we have that 
Vi = 1, and if {k, m) = 1, then (\4, Vm) = 1- Thus, if k and m are non-zero relatively prime 
integers, then VkVm\Vkm- Unfortunately, in general Vkm does not divide VkVm- In particular, 
Vkm is divisible by some prime powers which do not occur in Vk and Vm- So the main idea 
behind the proof is to invert these extra primes to force Vkm. to divide VkVm in the resulting 
ring. Of course we have to leave enough primes uninverted so that (12. ID still holds in the 
ring. 

We now describe the primes we do not invert. For each rational prime p and any positive 
integer £ we keep uninverted the largest primitive divisor of [p^]P. We call these primes 
indicator primes. (The idea that the indicator primes are enough to identify uniquely 
positive multiples of a generator was first investigated in f2l.) We invert all the other 
primes and denote by R the resulting subring of Q. Observe that for m = YIpI\ we have 
that Vm is divisible by the indicator prime of each [pl]P for all i and all £ = 1, . . . , £j, and, 
because of G2.2I) . by no other indicator primes. Indeed, first suppose q is an indicator 
prime Vpr, where p Pi for any i. In this case by (12. 2D , q divide V(pr^) = Vi = 1 and 
we have a contradiction. Next assume that q is an indicator prime for some Vpr, where 
r > £i. By definition of an indicator prime we have that q\Vpr but q does not divide V j for 




and 



(2.2) 



ii k,m e Z>o, then all the primes occurring in (Vk, Kn) occur in V(^k,m}, 
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any jG{l,...,r — 1}. Applying (I2.2D again we obtain g| V(pr^) = V^ei contradicting our 
assumptions in this case also. 

So now we are in a situation where for A;, m G Z^o ^nd relatively prime, \4Kn and 14.^ 
are divisible by the same uninverted primes. Unfortunately, there is one more point to take 
care of. The indicator primes do not necessarily appear to the same power in Vk, Vm and 
Vfcm (see Lemma [43] in this paper). However in the case of Q the difference in powers is at 
most 2 (in the general case one can bound this difference by twice the degree of the field 
over Q, but we will avoid all the cases where the power can go up by more than 2.) Let 
g 7^ p be rational primes. 

(2.3) If ordq Kn > 0, then ord, V^^ = ord, Vm, and ordg Vqm = 2 + ordg Vm- 
Observe that for t = port = q we have that ordg Vtm < 3 ord, Vm since 

ordg Vtm <2 + oidq Kn < 3 ordg Vm, 

as by assumption ord, Vm > 1- Now we can conclude that that if (Vk, Vm)R = 1 it is the 
case that VkmlnV^V^ in our ring. (Here for A, B e Rwe write "{A, B) r = 1" to mean that 
the reduced numerators of A and B are not simultaneously divisible by any non-inverted 

prime, and we write "A\fiB" to indicate the divisibility in the ring, i.e. the fact that — G R.) 
To summarize the discussion above we can now say 

{k,m) = 1 ^ Vn : {VnUVlVl A HnV^l^jK ^ \n\ = \km\). 

(See Proposition [4]T5] and Lemma [4.17i ) 

If {k, m) = 1, we say that the indices k and m can be "multiplied directly". Note also 
that for any triple of non-zero indices k, m and n we have that 

(2.4) VnlnV^V^ and VmVklnVn implies \n\ = \km\. 

(As above, the divisibility bar with a subscript R here refers to the divisibility in our ring.) 
Further, as a general matter, for any ring of characteristic not equal to 2, to define multi- 
plication, it is enough to define squaring: xy = + y)^ — — y^). Observe also that for 
any k ^ we can always multiply k and k + 1 directly. We use this fact to define squaring 
of an index: given an index k g Z^q, we require that for some s G Z^o it is the case that 

(2.5) VkVk+ilnVs A VIrV^V^^, 
or, in other words, 

(2.6) \{k + l)k\ = \s\ 

If not for absolute values in (12. 6D , we would be done, since we would be able to define 
a square of k by subtracting k from s. We deal with absolute values via considering all 
possible cases and using G2.1D in Lemma [5. 101 

U X 

Over Z, given integers U > 0,V > 0,X 0,Y such that — and — satisfy the 

chosen Weierstrass equation and such that {U, V) = 1, (X, Y) = 1, we can conclude that 
{U, V, X, Y) = (Un, Vn, Xn, Yn) for some unique n G Z^o- Unfortunately, if we now assume 
that {U > 0, y > 0, X 7^ 0, F 7^ 0) G R^, where R is, as above, our ring with infinitely many 

U X 

primes inverted, and — and — satisfy the chosen Weierstrass equation with (U, V)r = 
1, {X,Y)r = 1, then we will be able to conclude only that U = Un = UnUn,V = Vn = 
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VnVn, where ?7„, Vn are rational numbers whose reduced numerators and denominators are 
divisible by the inverted primes only. (A similar conclusion will apply to {X, Y).) However, 
since we are only interested in the divisibility by the non-inverted indicator primes, the 
"bar" parts do not matter or in other words, for any /c, m G Z^o still have that 



(k,m) = 1 ^ Vn : (KliiV^V^^ A VmVklnVn ^ \n\ = \km\). 

This is so, because {k,m) = 1 iVk,Vm)R = 1 and VnlnV^^V^ VnlnV^Vi, etc. The 
fact that we can express the condition of being relatively prime in our ring in polynomial 
terms is demonstrated in Lemma 15.21 Unfortunately, when the underlying field has a 
class number greater than one, there are other technical complications requiring raising 
variables to the power divisible by a class number to obtain relatively prime numerators 
and denominators. (See Notation |5.3[ Item[3]and Remark [5~4l ) 

The last point that needs to be explained is the density of the inverted and the non- 
inverted prime sets. In [24] and [f26ll , it was shown that the natural density of the indicator 
primes corresponding to the prime multiples of any infinite order point is 0. So the only 
remaining question is the density of the indicator primes corresponding to prime power 
multiples of such a point, when the power is at least 2. This density is also and the 
corresponding calculation is much easier. It was first carried out in ^ and is reproduced 
in the appendix of this paper for the convenience of the reader. 

3. An Outline of the Proof of Theorem 11.81 

In this section we keep for the moment the simplifying assumptions and notation of the 
preceding section, i.e. we assume that we are dealing with a rank one elliptic curve over Q 
with a trivial torsion group, and a Weierstrass equation as above, and that every non-trivial 
multiple of a generator has a primitive divisor. We also assume that Theorem 11.51 holds 
or in other words in a big subring i? of Q described above we have defined existentially 
multiplication of indices. 

If X G Q and x = —, where A, B e R with AB ^ 0, then we say that A and B are a 

B 

reduced numerator and a denominator respectively, if {A, B)^ = 1. In other words, neither 
A, nor B are divisible by "extra" non-inverted primes. If _R = Z, this definition is the same 
as the usual one. We now need the following results from [123|| CLemmas 14.81 and 14. 181 of 
this paper) : 
(3.7) 

"For any sufficiently large / G Z>o, for any k G Z>o we have that 
the reduced denominator of xi divides the reduced numerator of ( — — k^] in Z", 

\Xkl ) 

and 

, „ "For any n G Z>o there exists / G Z>o such that 

n divides the reduced denominator of xi in Z". 

Now let z be an arbitrary element of our big ring with the following property: there exists 
a non-zero integer k, such that for all rational numbers h in our ring, there exist non-zero 
integers i and j satisfying the equations (|3.9D - (I3.11D below. 

(3.9) }? divides the reduced denominator of xi in our ring. 



(3.10) 



j = ik 



The reduced denominator of Xi 
^•^■^^^ divides the reduced numerator of {z — — )^ in our ring. 

Xj 

(Here, as above, Xk,Xi,Xj are the x-coordinates of [k]P, [i]P and [j]P respectively.) Then 
z ez. 

Conversely, if z above is a square of a non-zero integer, then we can find ak e Z^o such 
that for every b in our big ring there exist i and j so that Q3.9D - flS.llD are satisfied. 

First assume that z, a rational number in our ring, is fixed. Let k be the corresponding 
non-zero integer, b an arbitrary element of the ring and assume that i,j e Z^o are such 
that the equations above are satisfied. From (13. 7D and 03. 9D we conclude that b divides 

the reduced numerator oi { — — k^] = ( — — P ] as well as the reduced numerator of 



, Xj y y X jfc 

{z -) = {z -) in our ring. Thus, b divides the reduced numerator oi z — k"^ in our 

Xj ^ik 

ring. If z = —, where zi, Z2 G Z-^o, then b divides zi — Z2k'^ in our ring. If we pick b to be 

divisible by g"^, where g is a prime which is not inverted in our ring and m is a positive 
integer large enough so that > \zi — Z2k'^\, then g"^ divides zi — Z2k'^ in Z and the only 
way the divisibility condition can hold is for zi = Z2k. Without loss of generality we can 
assume that zi and Z2 were picked to be relatively prime in Z, and since A; is a non-zero 
integer, we must conclude that Z2 = 1, and z = zi = k"^. 

Assume now that z = k"^ where k g Z^o- Let b be any rational number in our ring. Let 
2 > be such that 6^ divides the reduced denominator of xi and i is sufficiently large so 
that 03. 7D holds for / = ik. Such an i exists by 03. 8D . Finally let j = ik and observe that 
(I37TT]) now holds by OSTTD . 

4. Elliptic curves 

We now proceed with the detailed description of the proof. In this section we lay down 
the elliptic curve foundations of our results. Many of the technical details in this section 
are taken from ||23ll , [l24ll and [l26ll . Below we indicate which technical results have 
been taken from other papers. 

Notation and Assumptions 4.1. We add the following notation and assumptions to the 
list above. 

• Let E be an elliptic curve of rank 1 defined over K (in particular, we assume such 
an E exists) . 

• We fix a Weierstrass equation W : y'^ = x^ + ax + b for E with all the coefficients in 
the ring of integers of K. 

• Let E{K)tor:s be the torsion subgroup of E{K). 

• Let t be a multiple of jj^E{K)tors- 

• Let Q G E{K) be such that Q generates E{K)/E{K)tovs- 

• Let P := [t]Q. 

9 



• Let .^l^ad = yh^d{W,P,K) C consist of the primes that ramify in K/Q, the 
primes for which the reduction of the chosen Weierstrass model is singular (this 
includes all primes above 2), and the primes at which the coordinates of P are not 
integral. 

• For n e Z^o write [n\P = ?/„) = (x„,(P), y„(P)) where x„, e K. 

• For n G Z^Q, let the divisor of a:„ (P) be of the form 

=^^b (p) 

where 

- dn = Ylq 1 where the product is taken over all primes q of K not in ^bad 
such that ttq = ordq Xn < 0. 

- a„ = Hq where the product is taken over all primes q of K not in ^bad 
such that Oq = ordq x„ > 0. 

- b„ = Hq 'l""' where the product is taken over all primes q G =^bad and = 

ordq Xn- 

• For n as above, let ^„ = ^„(P) = {p G ^^it : p|3n}- By definition of ^bad and c)„, 
we have = 0. 

• For £ G .^^Q, define ai to be the smallest positive integer such that for any j > ae 
we have that \ ^^i-i ^ ^. By Proposition 14.41 below, for all but finitely many 
primes £ we have that = 1 . 

• For i G Z>i, let (P) = p^j be a prime of the largest norm in \ y^-i, if such a 
prime exists. (This prime will be called the indicator prime for [p£j](P).) 

• Let mo = Y\ae>i^"''^^^ ■ (Note that mo is well defined since, as we have observed 
above, for all but finitely many primes £ we have that = 1.) 

• For all j G Z>i let c[p = p^j+ord^mo- 

• Let T = [mo]P. 

• Let = yxiP) = {Pi^ -.eei^Qje Z>o}. 

• Let = \ '^k) U ymo- i^K will be the set of the inverted primes.) 

• Let ^„ = n i^K) \ yniQ- Note that = 0- i%i will be the collection of the 
prime factors of the "n"-th denominator which are not inverted.) 

• Let = ymon- i^n will bc thc set of the "not-bad denominator primes" for [ri]T.) 

• Let 'S^n = '^mon ^ud obscrvc that is empty. ('3^n will be the set of the non-inverted 
"denominator" primes for [n]T.) 

• Let c„ = Hq where the product is taken over all primes q of not in Wk such 
that Oq = ordq < 0. (The divisor c„ will be the non-inverted part of the "n"-th 
denominator) 

• Let fn ^moTf 

• For X e K, let d{x) = Hq 1""% where the product is taken over all primes q oi K 
such that Oq = ordqX < 0. Let n{x) = d{x~'^). 

• For X e K, let (x) = Hq where the product is taken over all primes q of i^' 
not in Wk such that aq = ordq x < 0. Let w.Wk{^) = ^Wxi^'^)- 

Below we combine ideas from ||23ll , ||26ll and Hm to show that it is enough to have one 
non-inverted indicator prime for every prime power of the index to identify the index of 
a point uniquely (up to a sign) . At the same time, if we don't invert only the indicator 
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primes of the index prime powers, we will have "almost" arranged for the multiplication 
of indices. 

As pointed out above, denominator prime sets are not enough to establish a sign of an 
index. This is demonstrated by the lemma below. 

Lemma 4.2. For any n e Z^q we have that = ^-n.^n = "^-n, ^-n = S^n, ^-n = ^n, 
and fn = f-n- 

Proof. Given the choice of our Weierstrass equation, we have that a;„„ = □ 

Our next step is to establish several important properties of the primes which appear in 
the denominators in Propositions 14.3144. 141 Fortunately for us, most of the technical work 
has already been done elsewhere. 

Proposition 4.3 (Lemma 3.1 of Il26ll "). Let $H be an integral divisor of K. Then 

{neZ\{0}:$K|r)„(P)}U{0} 

is a subgroup of Z. 

Proposition 4.4 (Proposition 3.5 of ^2M ). There exists C > such that for all i,m e 
with max{£, m) > C we have that \ U Xn) 0- 

Lemma 4.5. Let n G Z>i. Suppose that t G divides and p> 2 is a rational prime. 

(1) Ift\p, then ordtOpn = 2 + ordtO„. 

(2) Ifi\p, then ordt Op„ = ordt f «• 

Proof The proof of the lemma is almost identical to the proof of Lemma 3.3 of [ |26l l except 
for the fact that we allow p = 2. We also remind the reader that any t dividing 0„ is 
automatically not in S^had and therefore is not dyadic, ramified over Q or is among primes 
at which our Weierstrass model has a bad reduction. 

Remark 4.6. As was explained in Section[2l in either case, ordt3p„ < Sordt^n- 

□ 

Corollary 4.7. Let n G Z>i. Suppose that t G i3^K divides c„ (or f^, and p > 2 is a rational 
prime. 

(1) Ifi\p, then ordt Cp„ = 2 + ordt c„ (or ordt fpn = 2 + ordt fn)- 

(2) Ift\p, then ordt Cp„ = ordt c„ (or ordt fpn = ordt f J. 

Proof The corollary follows immediately from the lemma above if we note that we obtain 
c„ from dn. by removing factors of 0„ which are in Wk, and f„ = Cmon- D 

Lemma 4.8 (Lemma 10 of 112311 "). Let 21 be any integral divisor of K. Then there exists 
k eZ>0 such that 21 dixk). 

Lemma 4.9. Let m,n eZ \ {0}, and let (m, n) be their GCD. Then 



9' 


n^„, = 














'^(m,n) ) 
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and 

In particular, if {m,n) = 1, then 

'^rn n '^n = '^1=0, 

and 

n = = 0. 

Proq/: The assertion cy^n^n = ^(m.n) is exactly Lemma 3.2 of [f26ll . Therefore if (m, n) = 1 
we have that ^(m,n) = = by definition of .y„. Further, by definition, 

ay c/) ay c/i 

and therefore. 

Thus, if (m, n) = 1 we have 

Also by definition, 

= 1 n \ ) = (-?^ n H 'Yk) \-5^mQ 

and therefore, 

n = n ^„ n 'Yk) \-5^m,Q = (-^ ;m,n) H \ -5^mo = ^(m,n)- 

Consequently, if (m, n) = 1 we have that 

Kn, n K = ^1 = (^1 n r^') \ = 0- 

Finally again by definition, 
and therefore. 

Consequently, if (m, n) = 1 we have that 

%,n^n = ^l = ^rno = (^mo H ^x) \ ^mo = 0- 

□ 

Corollary 4.10. For any £ e =^(Q) and any j G Z>o we have f/iaf q^j exists, and qp & 3^k = 
ykmo if and only ifP divides k. (We remind the reader that by definition, qp = p^j+ord^cmo) is 
the indicator prime of [fi+oi^d.mojpj 

Proof By definition of qp , to establish its existence it is enough to show that 
At the same time, from the definitions of mo and ae we have that 
and therefore qp exists. 
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Now suppose j > and e = '^kmo- Then by definition of q^j, we have that 

by Lemma |4.9i But by the same lemma p if and only if j < ord^ k. 

Conversely, suppose j > and j < ord^A;. Then p^j+ord^ mo G yp+ord),mo c ykmo by Lemma 
14.91 once again and G J%^k- D 

Corollary 4.11. (1) For any k G Z,>i we have that 

^fc = Ui. ■■ie^Q,0<j< orde k}. 



(2) For k,n e Z>i we have that C if and onZj ifk 



n. 



(3) For /c, n G Z>i we have that 

(4) For k,n e Z>i we have that 
trivial divisor. 



f„ if and oniy if A; 



A;, n) 



n. 



1 if and on(y if (ffc,f„) = (1), where (1) is a 



Proof. (1) First we observe that by definition of = "^rnak = ymok \'^k = ^k \ ^/ 



K, 



these prime sets contain only the primes of the form pu for some ^ G and some 
i G Z>o- Secondly, by Corollary 14. 10[ we also have that qy G if and only if 

< j < ord^ k. 

(2) If we assume that k n, then I%^k ^ by Lemma [4^9] and consequently, ^ C Wn- 

Conversely, if we suppose that c then for every rational prime (', we have 
that q^ord^(fc) G by Part 1 of this corollary. Thus, by Part 1 again, for every rational 

prime (, we have that n. Consequently k divides n. 

(3) If we first assume that f„, then C ^„ and A; n by Part 2 of this corollary. Next 
if we suppose k n, then C ^ by Part 2 of this corollary again, and consequently 

ffc f„ by Corollary [43 

(4) Suppose (A;, n) = 1, then fi = by Corollarv l4.9[ Since all the prime divisors 
of fk are in and all the prime divisors of f„ are in we must conclude that 



ifk, fn 



Conversely if (ffc,f„) = (1), then n r„ 



{k,n): 



where the 



last equality holds by Corollary |4.9i But from Corollary |4.10[ we conclude that 
{k,n) = 1 since ^ is the only with m > which is an empty set. 

□ 

The next corollary is the first step towards the existential definition of multiplication of 
indices. 

Corollary 4.12. Let m,k e Z^o with (m, A;) = 1. Then = ?Kn^'3^k 

Proof. Since (m, k) = 1 the assertion follows from the Part 1 of CoroUarv K. 1 1 1 since for any 
j G Z>o and i G we have that < j < ord^ mk if and only if either < j < ord^ m or 
< j < ord£ k. □ 

While we established already that the denominator prime sets cannot distinguish be- 
tween positive and negative indices, the result below tells us that the indicator primes 
identify the absolute value of the index for a multiple of T uniquely. 
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Corollary 4.13. Let ni, n2 G Z>o be such that 'Wn^ = Wn^. Then rii = n2, 

Proof. By CoroUarv K. 1 1 1 we have that ni divides n2 and n2 divides rti. Thus, ni = n2. □ 

From Corollary 14. 1 3 1 we immediately obtain the proposition below. 

Corollary 4.14. Let rii, n2 G Z>o he such that f„^ = f„2- Then rii = n2, 

Proof. The equality = f„2 implies = and we are done by CoroUarv K. 131 □ 

We are now ready to conclude that under our definitions and under certain relative 
primality assumptions, the denominator of the product is "almost" equal to the product of 
the denominators. 

Proposition 4.15. Ifm, k e Z>o with (m, k) = 1, then fmfc|f|f^- 

Proof Let p G I^k be such that ordp f^k > 0. Then by Corollary 14. 1 2| either ordp f™ > 
or ordp fk > 0, but both inequalities cannot hold at the same time since {k,m) = 1. (See 
Lemma [4^91 ) Without loss of generality, assume the first alternative holds, and therefore 
by CoroUarv K. 71 and Remark [431 we have that ordp f^k < 3 ordp fm- □ 

Definition 4.16. li m,k e Z>o are such that (m, k) = 1, then we will say that m and k can 
be multiplied directly. 

The next lemma is a converse of sorts to the Proposition K-lSj 

Lemma 4.17. Letm,k,n G Z>o, ifk,fm) = (1). UflfL fmffclfn- Then {k,m) = 1, and 
n = mk. 

Proof First we show that {k, m) = 1. Suppose not. Let i divide (m, k). Then G ^ n ^ 
and (ffc,fm) 7^ (!)• Thus {k,m) = 1 and by assumption and CoroUarv K. 12| we now have 
that ^ = ^. U ^ = ^fc. By CoroUarv RTTS] we conclude that n = mk. □ 

The remaining Propositions K.18I - \4.22\ of this section will be necessary for defining 
integers using just one universal quantifier. We start with a lemma which allows us to 
generate integers. 

Lemma 4.18 (Lemma 11 of [f23ll "). There exists a positive integer rrii such that for any 
positive integers /, k. 



(4.1) ^{xi^,] 
in the integral divisor semigroup of K. 



Xlmi J 2 



Xklr. 



Remark 4.19. If we restrict our attention to the non-inverted primes only, we can rewrite 
(I4JD as 

/ \ 2 

(4.2) d^^jiixir. 



1 Xlmi 






\ Xklrrii 





Lemma 4.20. With nii as in Lemma 14.181 {'i)~^ii{ximj,np'j^{xkimi)) = (1) i/^ the integral 
divisor semigroup of K. 

Proof From Lemma [475] and Lemma [4791 it follows that divides d-^j^{xkimi) and 

by definition (0^^(xfc;„J, n^^^ (xfczmj) = (1). □ 

14 



From Lemma [4. 181 and Lemma [4.20| we also deduce the following corollary. 
Corollary 4.21. 



X 



J^2hK 



X 



klrrii 



Proof. From an elementary algebra calculation we have 



X 



r=0 



and therefore 



•^klmi 



X 



klm\ 



r=0 



•^klmi 



However, the only primes which can appear in 



r=0 



•^klmi 



are the primes occurring in 



■^klmi 



The non-inverted part of the divisor of ^''"^ is equal to ^^^^ (^^mi ) t^y^ (xfcfmi j ^ ^j^gj-g 



•^klmi 



mi mi J 



is an integral divisor by Lemma 14.71 and Lemma 14.51 This leaves only primes 

from n^j^{xkimi) in the denominator. Since none of these primes is present in 
due to Lemma [4. 201 we have that 



X 



Imi J 2hf 



X 



klmi 



■^klmi 



r=0 



•^klmi 



2r 



■^klmi 



□ 



Lemma 4.22. For any k G Z>o we have that l){xk), ffc CLre squares of some integral divisors 
ofK. 

Proof From the Weierstrass equation y'^ = x^ + ax + b we have that for any prime p of K, 
if ordp X < 0, then ordp(x^ + ax + b) = ordp < and ordp y < implying that ordp x = 
mod 2. □ 
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5. DioPHANTiNE Definition of Multiplication on Indices 

We start with a basic fact and some easy lemmas. 

Lemma 5.1. The set {x G Ok,Wk '■ x ^ 0} is Diophantine over Ok,Wk- (^^^ Definition 2.2.3 
and Proposition 2.2.4 of [l35ll .) 

We now use the fact that we can define the set of non-zero integers of our ring to define 
relative primality over the ring. 

Lemma 5.2. The set R = {(A, 5) e : AB ^ A {A,B)^^ = 1} i5 Diophantine over 

Proof. It is easy to see with the help of the Strong Approximation Theorem that for {A, B) G 
0|- -p- with AB 7^ the following statements are equivalent 

'(1) {A,B)^^ = l 

(2) 3X, Y G Oi^,rK ■.XA + YB = l 

□ 

Notation 5.3. We define three sets: one to represent the points on our elliptic curve, one to 
represent the elliptic curve addition, and one to represent the divisors of the denominators: 

(1) Let 

U X 

E = {{U, V, X, Y) G Ok^^^ \3k eZ-^o: — = Xm^k, y = Vmok}- 

For each quadruple {U, V, X, Y) the index k = k{U, V, X, Y) will be unique (since 
the size of the torsion group divides mo) and will be called the corresponding (to 
{U, V, X, Y)) index. 

(2) Let 

Plus = {{U^,V^,X,,Y,),{U2,V2,X2,Y,),{Us,Vs,Xs,Ys)} CE^ 
consist of triples of quadruples possessing corresponding indices ki,k2, k^ satisfying 

ki + k2 = ks- 

(3) Given (f/, V, X, Y) G E, let 

diU,V,X,Y) = {{A,B) G Ol^^^ : l^-j = -, (A, 5)^, = 1}. 

Remark 5.4. The reason for defining the set d{U, V, X, Y) is that over an arbitrary number 
field K we cannot make sure that the numerators and denominators are relatively prime 
in our ring. Thus a denominator can have "too many" primes in it and the divisibility 
conditions from Proposition 14. 151 can fail if we replace the divisors by the denominators. 
At the same time, by the definition of the class number, if we raise the a;-coordinate to 
the power equal to the class number, we can obtain a relatively prime numerator and 
denominator 

Given Lemma [5T2l the following assertion is obvious. 
Lemma 5.5. E, Plus, and d{U, V, X, Y) for fixed values of U, V, X, Y, are Diophantine over 

Ok,Wk- 
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The next lemma and its corollary establish a connection between d{U, V, X, Y) and the 
divisor of the corresponding point on the elliptic curve. 

Lemma 5.6. // (f/, V, X, Y) e E, {A, B) e d{U, V, X, Y), and k is the corresponding index, 
then for all p ^ Wk we have that Hk ordp = — ordp nw^ (B) (Here we remind the reader 
that nw^i^B) is the non-inverted part of the numerator of the divisor of B). 

Proof By definition of E and d{U, V, X, Y) we have that — = x'^^f, for the corresponding 

to ([/, V, X, Y) index k e Z^o- Without loss of generality we can assume that k > 0. C—k" 
gives the same B and the same by Lemma [4^21 ) Let p ^ Wk be such that ordp Xm^k < 0. 
Then either ordp A < or ordp B > 0. The first alternative is impossible because A G 
Ok,Wk ^rid p ^ Wk- Hence we conclude that ordp B > 0. Further we also have that 
ordp A = because otherwise the relative primeness conditions requiring that A and B are 
not simultaneously divisible by any prime outside Wk are violated. Now we see that 

Hk ordp Xmok = ordp A — ordp B = — ordp B. 

Suppose now that for some p ^ Wk it is the case that ordp x^ok > and ordp B > 0. In this 
case we also must have that ordp A> which again is impossible since {A, -B)#^ = 1. 

□ 

Given the lemma above we immediately conclude the following. 

Corollary 5.7. If I,h C /, /2 C / are finite subsets of non-zero integers, {Ui,Vi,Xi,Yi} e 

E, {Ai, Bi) G d{Ui, Vi, Xi, Yi},i e I v^^ith ki being the corresponding indices, then 




K 



Next we show that divisibility of indices is Diophantine in our ring. 

Lemma 5.8. Jf Divide = {(f/i, Vi, Xi, Yi), {U2, V2, X2, Y2)} C E^ consists of pairs of quadru- 
ples with the corresponding indices ki and k2 such that ki\k2, then Divide is Diophantine over 

Proof If (Ai, Bi) G d{Ui, Vi, Xi, Yi),i = 1, 2, then by Corollary Owe have that Bi B2 if 

and only if fkAfki- At the same time by Corollarv l4.11[ Part 3 and Lemma [4^ we have that 
f fc, I f if and only if /ci | fca . □ 

We can now define multiplication on the absolute values of indices. 

Lemma 5.9. // {U„ Vi, X„ Yi) G E, {A„ B,) G d{X„ Yi, U„ Vi},i = 1, 2, 3 with 

(5.1) (5i,52)^^ = l 

and 



(5.2) B^B2 



B. A B, 



3 



r3 T53 



K 



then for the corresponding indices ki, k2, k-s G Z^o we have that |A;i||A;2| = Iks 
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Proof. If ki is the index corresponding to {Ui, Vi, Xi, Yj), then from (I5.1D . Lemma [4^21 Corol- 
lary [4]TT1 Part 4, and Lemma [5^ we conclude that (ffci, ffca) = 1- Now from Corollary 15.71 
and (I5.2D it follows that ffcjfcalffes while ffeslf^Jfej, and the assertion of the lemma is true by 
Lemma [4J71 ' □ 

Our final step in this section is to define a square of an index. This is all we need to 
define multiplication. 

Lemma 5.10. For any (f/i, l^i, Xi, n), ([/a, 1^2, ^2, Fs), (^^a, V3, X3, Fs), (f/4, V^4, X4, F4) G E 
with the corresponding indices /ci, /c2, k^, and k^ respectively such that 

(1) >4 

(2) k2 = ki + l 

(3) ks ^ 

(4) k4 = k3- ki 

(5) (A;i-1)|(A;4-1) 

while (15. 3D and Q5.4D are satisfied, we have that ki = kf. 

Conversely for any (f/i, Vi,X^, Y^), {U^, V^, X^, Y^), (t/3, V^, X3, F3), {U,, V,, X,, Y,) e E with 
the corresponding indices \ki\ > 4, k2 = ki + 1, k^ = kf + ki, k^ = kf, (15. 3D and 05. 4D wiZZ be 
5atis/ied. 

(5.3) (A,, 5,) e d{Ui, Vi, X„ F,), z = 1, 2, 3, 4 



(5.4) Sifi2 



^3 and 53 

1Vk 



d3 d3 



Proof First assume that {Ui,Vi,Xi, Zi) e E,i = 1,...,4 with the corresponding indices 
/ci,...,A;4 as above are given and (15. 3D . Q5.4D are satisfied. In this case observe that 
(/ci, /C2) = 1 and therefore by Corollary 14. 1 1 1 we have that (f/ti, ffca) = 1- Thus, by Corollary 
15. 7[ we conclude that {Bi, 82)^^^ = 1. Further, from Lemma [5T9l we can now deduce that 
l^sl = 1^1(^1 + 1)1- Consequently, k^ = ±(/ci(fci + 1)). Thus, k^ = kl or k^ = —kf — 2ki. If 
the second alternative holds, then {ki — l)\{—kl — 2ki) and {ki — 1)|3 which is impossible 
since > 4. Thus we must have k2 = kf. 

Suppose now that k2 = ki + 1, k^ = kf + ki, and ki = kj — 1. By Corollary 14. 1 1 1 we have 
that ffciffcalffca and fkilfljl^- Hence by Corollary 15.71 we can conclude that fl5.4D is satisfied 
by some Bi, B2, B^, B4 e Ok,Wk which also satisfy fl5.3D . 

□ 

Lemma [5T8l together with Lemma [5.101 complete the proof of Theorem 11.51 and Corollary 
II. 7i (The density computation is in the Appendix.) 

We finish this section with a new notation to be used below. 
Notation 5.11. • Given {Ui, Vi, Xi, Yi) G E, z = 1, 2, 3 we will say that 

((f/i, Vi, X,, Y,), {U2, Y2, X2, Y2), (Z73, Ys, X3, Y,)) G n 
to mean that the corresponding indices ki,k2, k^ satisfy ^3 = /ci/c2- 
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• Let 

U X 

El = {{U, V, X, Y) e Oj^ y^,^ I 3 unique k E Z^o : y = Xm^mok, y = 2/mimofe}- 
The positive integer nii is defined in Lemma [4.18[ 

6. Defining Z over Ok,p'k Using One Universal Quantifier 

In this section we use the existential definition of multiphcation on indices to give a 
first-order definition of Z over Ok,Wk using just one universal quantifier We start with a 
technical lemma. 

Lemma 6.1. If z g Ok,Wk has the following property: 

3UuVuXuY,,yb, 3U2,V2,X2,Y2,Us,V3,Xs,Ys,AuA2,As,BuB2,Bs,C 
(with all the variables ranging over Ok^-Wk^ ^^^^ ^^^^ 

(6.1) (f/i,yi,Xi,yi),(f/3,V3,^3,>^3) eE,(t/2,V2,X2,F2) eEi, 

(6.2) ((t/i, Fi, Xi, Fi), (f/2, V2, X2, F2), (t/3, ^3, X3, Fs)) e n, 

(6.3) {Ai, B,) G rf(?7i, l^i, X„ r,), ^ = 1, 2, 3, 

(6.4) 6=^"^ U-^ 52, 

(6.5) {A^B2Z - 53^2)'"^ = S2''"'"'C, 
then 2; G Z. 

Conversely, if zq g Z^o '^"'^ 2^ = ^'o^'^ > f^hen Equations fl6.1D - fl6.5D can be satisfied with 
variables as above ranging over Ok,Wk- 

Proof From (I6.1D - (I6.3D . we conclude that if ki,k2,k3 are the indices corresponding to 
{Ui,Vi,Xi,Yi), {U2,V2,X2,Y2), and (f/3, 1^3, ^3, X3) respectively, then k-s = k^ki, k2 = 
mod mi and n^j^{Bi) = f^^. Further for the discussion below ki is fixed. From equation 
06.51) . we obtain that 

ny^(i?2''"+i)|n.r,.(A3i?2^ - ^53)''" 

and therefore 

n^^{B2) ny/^(A32-^^)2'^^ 
Further, since (i?2, ^3)'#'k = 1 by Lemma [4.20[ we have that 

(6.6) n^,(i?2)|n^,(z-^)2^- 

Thus, since n^^{B2) is a 2/ix-th power of another divisor in K by Lemma [4.22[ and by the 
definition of B2 we have that 

^2^3, 



(6.7) ''VmJB2 



% ^3-D2 
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From Corollary 14.211 and Lemma |4.22[ since 
divisible by mi, we conclude that 



kik2, and the indices k2 and fcs are 



■2mi, 



X' 



k2mo 



X 



kzmo 



and therefore, using the definition of B2, we have 



Substituting 



A.Bo 



for 



X 



h 



K 



k2mo 



X 



k'imo 



^Wk {B2 



we obtain 



X 



X 



hK 



-k'l' 



k1^ 



(6.8) ^Vn#k(i?2; 

Combining (I6.7D and (I6.8D , we obtain 



A2BS 
A3B2 



k1' 



and 



n^^ {z - kf"- 



Since the last divisibility condition has to hold for all h, we must conclude that z = kf 



Conversely, suppose z 



2h, 



for zq e Z^o- Let {Ui,Vi,Xi,Yi) e E with the corre- 



sponding index ki = zq. Let b e Ok,Wk given. Let k2 = mod rrii be such that 
b"^ \wk f#k(^fc2mo)- Such an index k2 exists by Lemma [4^81 Let (f/2, ^2, -^2, ^2) G E corre- 
spond to ^2. Let k'i = kik2 and let (t/3, V3, X3, Z3) G E correspond to the index k^. Observe 
that conditions (16. ID and (16. 2D are now satisfied. Further note that equation (16. 6D holds 
by Corollary 14.211 and therefore equation (I6.5D holds also. □ 

To deal with the case of an arbitrary non-zero integer we add the following corollary. 
Corollary 6.2. If zq e Ok,Wk the following property: 

3zi, . . . , Z2hK: 

3f/i,o,...,f/i 

3-^1,07 • • • 5 -^1,2/iK' ^1,0; • • 
f^3,2/iK5 ^,0, • • • 



5 Yl,2hK^ 



, ^3,2/1 A' ; ^3,0, 



3t/3,0 
3-^^3,0, 

3^1,0i -Bi^O) • • • ; ^l,2hKi Bl^2hKi ^2; -^2, ^3,0; -83,0; 

(with all the variables ranging over Ok,^^) ^^^^ ^^^^ 
(6.9) z, = {z,+3f^'<,3 = Q,. 



^3,2/1 jf, 
; ^3,2hj( 1 

■ ■ , ^3,2hK ; -^3,2/iK ) C'o, 



.a 



2hKi 



(6.10) 



(f^jj'j £ E, z 
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2/1;,, 

l,3,j = 0,. 



2/i 



(6.11) ([/2,K2,X2,y2) eEi, 

(6.12) [(f/i,„ Vlj, X,j, Y,j), (f/2, V2, X2, Y2), {Usj, Vsj, X,j, F3,,)] G n, J = 0, . . . , 2hK, 

(6.13) e diUij, V^j, Xij, r,,,), ^ = 1, 3, J = 0, . . . , 2hK, 

(6.14) (^2,^2) Grf(f/2,\^2,X2,F2), 

(6.15) fe^'^- 1^^ 52, 



(6.16) {A3,jB2Z, - B,,,A2y'^ = 5f J = 0, . . . , 2/i 

Conversely, if zq g Z^Q:. then Equations 06. 9D - (I6.16D can be satisfied with variables as 



described above ranging over Ok,h^k- 
Proof If the assumptions of the corollary are true, then by Lemma [6Jl we have that 

^o"'^,...,(^o + 2/ii,)''^^ gZ, 

and by Corollary B. 10.10 of [l35ll . we have that zq g Q. At the same time, since z^^"^ G Z 
we have that zq is an algebraic integer, and hence in Z. The rest of the proof is analogous 
to the proof of the second part of Lemma [6Jl □ 

The last proposition concludes the proof of Theorem [LSI 

7. Infinite Extensions 

Notation and Assumptions 7.1. We add the following to our assumption list. 

• Let Koo be a possibly infinite algebraic extension of K. 

• Assume E{Koo) = E{K). 

• Let Ok^.Wk^ be the integral closure of Ok,Wk -^oo- 

Given the assumptions on our elliptic curve, it is easy to see that the results of the 
previous section will carry over, and therefore we have the following theorem: 

Theorem 7.2. (1) Let K be a number field. Let E be an elliptic curve defined and of 
rank one over K. Let P be a generator of E{K) modulo the torsion subgroup, and fix 
an affine Weierstrass equation for E of the form y"^ = + ax + b, with a,b e Ok, 
where Ok is the ring of integers of K. Let ?/„) be the coordinates of [n]P derived 
from this Weierstrass equation. Then there exists a set of K-primes Wk of natural 
density one, and a positive integer nio such that the following set Hoc C O]^^ is 
Diophantine over Ok^ Wt^ ■ 

(?7i, t/2, U^, Xi, X2, X3, V^i, V^2, V^3, Y2, F3) G Hoo ^ 

3 unique h, /c2, h G Z^o such that (^^, = {xr,^ok,, VmokJ and = /ci/c2. 
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(2) Forn^O let 0oo(n) = [{Un, K, ^n, Yn)], the class of {Un, K, Xn, Yn) under the equiv- 
alence relation described below, where Un,Vn,Xn,Yn G Ok^,:^'^^' YnVn 7^ 0, and 

U X \ 

— , — - J. Let 0oo(O) = {[0, 0, 0, 0]}. Then (poo is a class Diophantine 

Yn J 

model ofZ. (Here ifYV j^O we have that {U, V, X, Y) ^ {U, V, X, Y) if and only if 
-) = (- -)) 

(3) Z is definable over Ok^,Wk^ using one universal quantifier 



8. Appendix 

In this Appendix we calculate the natural density of This calculation is similar to 
the one carried in jSl]. We use Notation [4]T] and a new notation: for a prime p of a number 
field K we let Np denote the size of the residue field of p. 

Lemma 8.1. Let £ G ^(Q) and suppose p g S^in+i \ for some n G Z>o. (Such a p exists, 
ifn> ae.) Then < 3Np. 

Proof If p G S^en+i \y£n, then p does not divide the discriminant of our Weierstrass equation 
and E, the reduction of E mod p is non-singular. Further, xen, yin are integral at p, while 
ordpa;£n+i < 0, ordp y^n+i < 0. Therefore, under the reduction mod p, the image of [i"-]P 
is not O - the image of O mod p , while [£"+^]P = O. Thus we must conclude that -E'(Fp) 
has an element of order and therefore i'"+^|#£'(Fp). Let #Fp = Np = g. From a 
theorem of Hasse we know that #^(Fp) < g + 1 + 2^ < 3q (see fl^. Chapter V, Section 
1, Theorem 1.1). □ 

Lemma 8.2. The natural density of the set = {p^k : i G k G Z>i A k > a^} is zero. 

Proof For p = p^fe G =c/, the preceding lemma says that SNp^fe > i'^. Thus, since each p G ^ 
corresponds to a distinct pair {£, k) with £ G ^^{Q) and k G Z>2 with 3Np > t", we have 
the following inequality: 

#{p G =5/ : Np < X} < #{(£, k)e^QX Zfc>2 : £ < v^} 

Clearly if -\/3X < 2, there will be no prime £ with t < \/3X. Thus, we can limit ourselves 
to positive integers k such that k < log2(3X). 

By the Prime Number Theorem (see IITSll . Theorem 4, Section 5, Chapter XV), for some 
positive constant C we have that #{£ e : £ < X} < CX/\ogX for all X G Z>o. From 
the discussion above we now have the following sequence of inequalities: 

{p G =5/ : Np < X} < 



< 



< 



riog2{3X)i 

J2 #{£ G : £ < \/3X} 

k=2 
riog2(3X)l 

J2 W^^Q-^< VSX} 



k=2 



log2(3X)[C 



vsx 
log Vsx 



cvx 
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for some positive constant C. At the same time by the Prime Number Theorem again we 
also know that for some positive constant C we have #{p G '■ Np < X] > CX/ logX. 
Thus the upper density of £/ is 

#{p G : Np < X} ^ CVXlogX 

nmsup —7 — — — - < limsup = U. 

x^J #{p G : Np < X} - x^oo^ CX 

Hence ^/ has a natural density, and it is zero. □ 

Proposition 8.3. The set 1^(P) has natural density zero. 

Proof. We first observe that it was proven in [l23ll and [l26ll that the set 

^={pe:ie^QAae = l} 
has a natural density that is zero. Finally we note that = '^(P). □ 

References 



[1 
[2 
[3 

[4: 
[5 
[6 

[7 
[8 

[9 

[10 

[11 
[12 

[13 
[14: 

[15 
[16 

[17: 
[18 



Gunther Cornelissen, Thanases Pheidas, and Karim Zahidi. Division-ample sets and diophantine prob- 
lem for rings of integers. Journal de Theorie des Nombres Bordeaux, 17:727-735, 2005. 
Gunther Cornelissen and Alexandra Shlapentokh. Defining the integers in large rings of number fields 
using one universal quantifier. To appear in Zapiski Nauchnykh Seminarov POMI. 
Gunther Cornelissen and Karim Zahidi. Topology of diophantine sets: Remarks on Mazur's conjectures. 
In Jan Denef, Leonard Lipshitz, Thanases Pheidas, and Jan Van Geel, editors, Hilbert's Tenth Problem: 
Relations with Arithmetic and Algebraic Geometry, volume 270 of Contemporary Mathematics, pages 
253-260. American Mathematical Society, 2000. 

Gunther Cornelissen and Karim Zahidi. Elliptic divisibility sequences and undecidable problems about 
rational points. J. ReineAngew. Math., 613:1-33, 2007. 

Martin Davis. Hilbert's tenth problem is unsolvable. American Mathematical Monthly, 80:233-269, 
1973. 

Martin Davis, Yuri Matiyasevich, and Julia Robinson. Hilbert's tenth problem. Diophantine equations: 
Positive aspects of a negative solution. In Proc. Sympos. Pure Math., volume 28, pages 323- 378. Amer. 
Math. Soc, 1976. 

Jan Denef. Hilbert's tenth problem for quadratic rings. Proc. Amer Math. Soc, 48:214-220, 1975. 
Jan Denef. Diophantine sets of algebraic integers, II. Transactions of American Mathematical Society, 
257(1) :227- 236, 1980. 

Jan Denef and Leonard Lipshitz. Diophantine sets over some rings of algebraic integers. Journal of 
London Mathematical Society, 18(2):385-391, 1978. 

Kirsten Eisentrager. Hilbert's tenth problem for algebraic function fields of characteristic 2. Pacific J. 
Math., 210(2) :261-281, 2003. 

Gerald Janusz. Algebraic Number Fields. Academic Press, New York, 1973. 

H. K. Kim and F. W. Roush. Diophantine unsolvability for function fields over certain infinite fields of 

characteristic p. Journal of Algebra, 152(1) :230-239, 1992. 

Serge Lang. Algebraic Number Theory. Addison Wesley, Reading, MA, 1970. 

Yuri V. Matiyasevich. Hilbert's tenth problem. Foundations of Computing Series. MIT Press, Cambridge, 
MA, 1993. Translated from the 1993 Russian original by the author. With a foreword by Martin Davis. 
Barry Mazur. The topology of rational points. Experimental Mathematics, 1 (1) :35-45, 1992. 
Barry Mazur. Questions of decidability and undecidability in number theory. Journal of Symbolic Logic, 
59(2):353-371, June 1994. 

Barry Mazur. Open problems regarding rational points on curves and varieties. In A. J. Scholl and R. L. 
Taylor, editors, Galois Representations in Arithmetic Algebraic Geometry. Cambridge University Press, 
1998. 

Barry Mazur and Karl Rubin. Ranks of twists of elliptic curves and Hilbert's Tenth Problem. 
|arXiv:0904.3709l /2 [math.NT]. 

23 



[19] Thanases Pheidas. Hilbert's tenth problem for a class of rings of algebraic integers. Proceedings of 
American Mathematical Society, 104(2) :61 1-620, 1988. 

[20] Thanases Pheidas. Hilbert's tenth problem for fields of rational functions over finite fields. Inventiones 
Mathematicae, 103:1-8, 1991. 

[21] Thanases Pheidas. An effort to prove that the existential theory of Q is undecidable. In Jan Denef, 
Leonard Lipshitz, Thanases Pheidas, and Jan Van Geel, editors, Hilbert's Tenth Problem: Relations with 
Arithmetic and Algebraic Geometry, volume 270 of Contemporary Mathematics, pages 237-252. Ameri- 
can Mathematical Society, 2000. 

[22] Bjorn Poonen. Elliptic curves whose rank does not grow and Hilbert's Tenth Problem over the rings of 
integers. Private Communication. 

[23] Bjorn Poonen. Using elliptic curves of rank one towards the undecidability of Hilbert's Tenth Problem 
over rings of algebraic integers. In C. Fieker and D. Kohel, editors. Algorithmic Number Theory, volume 
2369 of Lecture Notes in Computer Science, pages 33-42. Springer Verlag, 2002. 

[24] Bjorn Poonen. Hilbert's Tenth Problem and Mazur's conjecture for large subrings of Q. Journal ofAMS, 
16(4):981-990, 2003. 

[25] Bjorn Poonen. Characterizing integers among rational numbers with a universal-existential formula. 
Amen J. Math., 131(3):675-682, 2009. 

[26] Bjorn Poonen and Alexandra Shlapentokh. Diophantine definability of infinite discrete non- 
archimedean sets and diophantine models for large subrings of number fields. Journal fiir die Reine 
und Angewandte Mathematik, 2005:27-48, 2005. 

[27] Harold Shapiro and Alexandra Shlapentokh. Diophantine relations between algebraic number fields. 
Communications on Pure and Applied Mathematics, XLII:1113-1122, 1989. 

[28] Alexandra Shlapentokh. Diophantine undecidability for some function fields of infinite transcendence 
degree and positive characteristic. Zapiski Seminarov POMI, 304:141-167. 

[29] Alexandra Shlapentokh. Extension of Hilbert's tenth problem to some algebraic number fields. Commu- 
nications on Pure and Applied Mathematics, XLII:939-962, 1989. 

[30] Alexandra Shlapentokh. Diophantine undecidability of algebraic function fields over finite fields of 
constants. Journal of Number Theory, 58(2):317-342, June 1996. 

[31] Alexandra Shlapentokh. Diophantine definability over some rings of algebraic numbers with infinite 
number of primes allowed in the denominator. Inventiones Mathematicae, 129:489-507, 1997. 

[32] Alexandra Shlapentokh. Defining integrality at prime sets of high density in number fields. Duke Math- 
ematical Journal, 101(1):117-134, 2000. 

[33] Alexandra Shlapentokh. Hilbert's tenth problem for algebraic function fields over infinite fields of con- 
stants of positive characteristic. Pacific Journal of Mathematics, 193(2):463-500, 2000. 

[34] Alexandra Shlapentokh. On diophantine definability and decidability in large subrings of totally real 
number fields and their totally complex extensions of degree 2. Journal of Number Theory, 95:227-252, 
2002. 

[35] Alexandra Shlapentokh. Hilbert's Tenth Problem: Diophantine Classes and Extensions to Global Fields. 

Cambridge University Press, 2006. 
[36] Alexandra Shlapentokh. Diophantine definability and decidability in the extensions of degree 2 of 

totally real fields. Journal of Algebra, 313(2) :846-896, 2007. 
[37] Alexandra Shlapentokh. Elliptic curves retaining their rank in finite extensions and Hilbert's tenth 

problem for rings of algebraic numbers. Trans. Amen Math. Soc, 360(7) :3541-3555, 2008. 
[38] Alexandra Shlapentokh. Rings of algebraic numbers in infinite extensions of (Q) and elliptic curves 

retaining their rank. Arch. Math. Logic, 48(1):77-114, 2009. 
[39] Joseph Silverman. The Arithmetic of Elliptic Curves. Springer Verlag, New York, New York, 1986. 

Department of Mathematics, East Carolina University, Greenville, NC 27858 
E-mail address: shlapentokhaOecu . edu 
URL: www . personal . ecu . edu/ shlapentokha 



24 



